just--mike
Smartphone Addicted
- Lid geworden
- 18 mrt 2006
- Berichten
- 7.271
- Waarderingsscore
- 123
Hoi,
hierbij een logje van iemand anders die heeft vage problemen maar kan het mij niet uitleggen ik heb al mbam gedraait maar niks te vinden dus hierbij een hjt.
[hjt]
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:35:33, on 25-1-2011
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16700)
Boot mode: Normal
Running processes:
c:\program files (x86)\egistec\mywinlocker 3\x86\mwldaemon.exe
c:\windows\system32\oem\setevent.exe
c:\program files (x86)\norton utilities 14\rmtray.exe
c:\program files (x86)\egistec egis software update\egisupdate.exe
c:\program files (x86)\scansoft\omnipagese4.0\opwarese4.exe
c:\program files (x86)\acer\hotkey utility\hotkeyutility.exe
c:\program files (x86)\norton internet security\norton internet security\engine\18.5.0.125\ccsvchst.exe
c:\program files (x86)\windows live\messenger\msnmsgr.exe
c:\program files (x86)\windows live\contacts\wlcomm.exe
c:\program files (x86)\teamviewer\version6\teamviewer.exe
c:\program files (x86)\trend micro\hijackthis\hijackthis.exe
r1 - hkcu\software\microsoft\internet explorer\main,default_page_url = [noparse]http://nl.msn.com/[/noparse]
r0 - hkcu\software\microsoft\internet explorer\main,start page = [noparse]http://www.startpagina.nl/[/noparse]
r1 - hklm\software\microsoft\internet explorer\main,default_page_url = [noparse]http://go.microsoft.com/fwlink/?linkid=69157[/noparse]
r1 - hklm\software\microsoft\internet explorer\main,default_search_url = [noparse]http://go.microsoft.com/fwlink/?linkid=54896[/noparse]
r1 - hklm\software\microsoft\internet explorer\main,search page = [noparse]http://go.microsoft.com/fwlink/?linkid=54896[/noparse]
r0 - hklm\software\microsoft\internet explorer\main,start page = [noparse]http://homepage.acer.com/rdr.aspx?b=acaw&l=0413&m=aspire_x3300&r=17360410sn0797368qsi5nx931l933[/noparse]
r0 - hklm\software\microsoft\internet explorer\search,searchassistant =
r0 - hklm\software\microsoft\internet explorer\search,customizesearch =
r0 - hklm\software\microsoft\internet explorer\main,local page = c:\windows\syswow64\blank.htm
r0 - hkcu\software\microsoft\internet explorer\toolbar,linksfoldername =
r3 - urlsearchhook: (no name) - {3ad798d0-4642-4c55-bc14-cfe7dd19e0d1} - (no file)
r3 - urlsearchhook: (no name) - {b896b704-25f7-4468-9feb-4088e111b6aa} - (no file)
r3 - urlsearchhook: amigobar toolbar - {c54a4bc4-2966-40ac-9ca4-ad863d6148ee} - c:\program files (x86)\amigobar\tbamig.dll
f2 - reg:system.ini: userinit=userinit.exe
o2 - bho: mediabar - {0974ba1e-64ec-11de-b2a5-e43756d89593} - c:\progra~2\bearsh~1\mediabar\toolbar\bearsharemediabardx.dll
o2 - bho: conduit engine - {30f9b915-b755-4826-820b-08fba6bd249d} - c:\program files (x86)\conduitengine\conduitengine.dll
o2 - bho: symantec nco bho - {602adb0e-4aff-4217-8aa1-95dac4dfa408} - c:\program files (x86)\norton internet security\norton internet security\engine\18.5.0.125\coieplg.dll
o2 - bho: symantec intrusion prevention - {6d53ec84-6aae-4787-aeee-f4628f01010c} - c:\program files (x86)\norton internet security\norton internet security\engine\18.5.0.125\ips\ipsbho.dll
o2 - bho: aanmeldhulp voor windows live id - {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files (x86)\common files\microsoft shared\windows live\windowslivelogin.dll
o2 - bho: windows live messenger companion helper - {9fdde16b-836f-4806-ab1f-1455cbeff289} - c:\program files (x86)\windows live\companion\companioncore.dll
o2 - bho: amigobar - {c54a4bc4-2966-40ac-9ca4-ad863d6148ee} - c:\program files (x86)\amigobar\tbamig.dll
o2 - bho: java(tm) plug-in 2 ssv helper - {dbc80044-a445-435b-bc74-9c25c1c588a9} - (no file)
o3 - toolbar: mediabar - {0974ba1e-64ec-11de-b2a5-e43756d89593} - c:\progra~2\bearsh~1\mediabar\toolbar\bearsharemediabardx.dll
o3 - toolbar: amigobar toolbar - {c54a4bc4-2966-40ac-9ca4-ad863d6148ee} - c:\program files (x86)\amigobar\tbamig.dll
o3 - toolbar: conduit engine - {30f9b915-b755-4826-820b-08fba6bd249d} - c:\program files (x86)\conduitengine\conduitengine.dll
o3 - toolbar: norton toolbar - {7febefe3-6b19-4349-98d2-ffb09d4b49ca} - c:\program files (x86)\norton internet security\norton internet security\engine\18.5.0.125\coieplg.dll
o4 - hklm\..\run: [egistecliveupdate] c:\program files (x86)\egistec egis software update\egisupdate.exe
o4 - hklm\..\run: [ssbkgdupdate] c:\program files (x86)\common files\scansoft shared\ssbkgdupdate\ssbkgdupdate.exe -embedding -boot
o4 - hklm\..\run: [opwarese4] c:\program files (x86)\scansoft\omnipagese4.0\opwarese4.exe
o4 - hklm\..\run: [hotkey utility] c:\program files (x86)\acer\hotkey utility\hotkeyutility.exe
o4 - hkcu\..\run: [nortonutilities] c:\program files (x86)\norton utilities 14\rmtray.exe /s
o4 - hkcu\..\run: [sidebar] c:\program files\windows sidebar\sidebar.exe /autorun
o4 - hkus\s-1-5-19\..\run: [sidebar] %programfiles%\windows sidebar\sidebar.exe /autorun (user 'local service')
o4 - hkus\s-1-5-19\..\runonce: [mctadmin] c:\windows\system32\mctadmin.exe (user 'local service')
o4 - hkus\s-1-5-20\..\run: [sidebar] %programfiles%\windows sidebar\sidebar.exe /autorun (user 'network service')
o4 - hkus\s-1-5-20\..\runonce: [mctadmin] c:\windows\system32\mctadmin.exe (user 'network service')
o8 - extra context menu item: google sidewiki... - res://c:\program files (x86)\google\google toolbar\component\googletoolbardynamic_mui_en_e11712c84ea7e12b.dll/cmsidewiki.html
o9 - extra button: @c:\program files (x86)\windows live\companion\companionlang.dll,-600 - {0000036b-c524-4050-81a0-243669a86b9f} - c:\program files (x86)\windows live\companion\companioncore.dll
o9 - extra button: @c:\program files (x86)\windows live\writer\windowslivewritershortcuts.dll,-1004 - {219c3416-8cb2-491a-a3c7-d9fcddc9d600} - c:\program files (x86)\windows live\writer\writerbrowserextension.dll
o9 - extra 'tools' menuitem: @c:\program files (x86)\windows live\writer\windowslivewritershortcuts.dll,-1003 - {219c3416-8cb2-491a-a3c7-d9fcddc9d600} - c:\program files (x86)\windows live\writer\writerbrowserextension.dll
o10 - unknown file in winsock lsp: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
o10 - unknown file in winsock lsp: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
o10 - unknown file in winsock lsp: c:\windows\system32\nvlsp.dll
o10 - unknown file in winsock lsp: c:\windows\system32\nvlsp.dll
o10 - unknown file in winsock lsp: c:\windows\system32\nvlsp.dll
o10 - unknown file in winsock lsp: c:\windows\system32\nvlsp.dll
o10 - unknown file in winsock lsp: c:\windows\system32\nvlsp.dll
o10 - unknown file in winsock lsp: c:\windows\system32\nvlsp.dll
o10 - unknown file in winsock lsp: c:\windows\system32\nvlsp.dll
o10 - unknown file in winsock lsp: c:\windows\system32\nvlsp.dll
o16 - dpf: {c3f79a2b-b9b4-4a66-b012-3ee46475b072} (messengerstatsclient class) - [noparse]http://messenger.zone.msn.com/binary/messengerstatspaclient.cab56907.cab[/noparse]
o16 - dpf: {e2883e8f-472f-4fb0-9522-ac9bf37916a7} - [noparse]http://platformdl.adobe.com/nos/getplusplus/1.6/gp.cab[/noparse]
o16 - dpf: {edfcb7cb-942c-4822-af14-f0b687409848} (image uploader control) - [noparse]http://cache.hyves-static.net/statics/aurigma/imageuploader4.cab[/noparse]
o18 - protocol: symres - {aa1061fe-6c41-421f-9344-69640c9732ab} - (no file)
o18 - protocol: wlpg - {e43ef6cd-a37a-4a9b-9e6f-83f89b8e6324} - c:\program files (x86)\windows live\photo gallery\albumdownloadprotocolhandler.dll
o23 - service: @%systemroot%\system32\alg.exe,-112 (alg) - unknown owner - c:\windows\system32\alg.exe (file missing)
o23 - service: @%systemroot%\system32\cisvc.exe,-1 (cisvc) - unknown owner - c:\windows\system32\cisvc.exe (file missing)
o23 - service: @%systemroot%\system32\efssvc.dll,-100 (efs) - unknown owner - c:\windows\system32\lsass.exe (file missing)
o23 - service: @%systemroot%\system32\fxsresm.dll,-118 (fax) - unknown owner - c:\windows\system32\fxssvc.exe (file missing)
o23 - service: forceware intelligent application manager (iam) - unknown owner - c:\program files\nvidia corporation\networkaccessmanager\bin32\nsvcappflt.exe
o23 - service: gregservice (greg_service) - acer incorporated - c:\program files (x86)\acer\registration\greghsrw.exe
o23 - service: google updateservice (gupdate) (gupdate) - google inc. - c:\program files (x86)\google\update\googleupdate.exe
o23 - service: @%windir%\system32\inetsrv\iisres.dll,-30007 (iisadmin) - unknown owner - c:\windows\system32\inetsrv\inetinfo.exe (file missing)
o23 - service: @keyiso.dll,-100 (keyiso) - unknown owner - c:\windows\system32\lsass.exe (file missing)
o23 - service: @comres.dll,-2797 (msdtc) - unknown owner - c:\windows\system32\msdtc.exe (file missing)
o23 - service: @mqutil.dll,-6102 (msmq) - unknown owner - c:\windows\system32\mqsvc.exe (file missing)
o23 - service: mywinlocker service (mwlservice) - egis technology inc. - c:\program files (x86)\egistec\mywinlocker 3\x86\\mwlservice.exe
o23 - service: norton 360 (n360) - unknown owner - c:\program files (x86)\norton 360\engine\3.8.0.41\ccsvchst.exe (file missing)
o23 - service: @%systemroot%\system32\netlogon.dll,-102 (netlogon) - unknown owner - c:\windows\system32\lsass.exe (file missing)
o23 - service: norton internet security (nis) - symantec corporation - c:\program files (x86)\norton internet security\norton internet security\engine\18.5.0.125\ccsvchst.exe
o23 - service: forceware ip service (nsvcip) - unknown owner - c:\program files\nvidia corporation\networkaccessmanager\bin32\nsvcip.exe
o23 - service: nvidia display driver service (nvsvc) - unknown owner - c:\windows\system32\nvvsvc.exe (file missing)
o23 - service: @%systemroot%\system32\psbase.dll,-300 (protectedstorage) - unknown owner - c:\windows\system32\lsass.exe (file missing)
o23 - service: @%systemroot%\system32\locator.exe,-2 (rpclocator) - unknown owner - c:\windows\system32\locator.exe (file missing)
o23 - service: @%systemroot%\system32\samsrv.dll,-1 (samss) - unknown owner - c:\windows\system32\lsass.exe (file missing)
o23 - service: @%systemroot%\system32\snmptrap.exe,-3 (snmptrap) - unknown owner - c:\windows\system32\snmptrap.exe (file missing)
o23 - service: @%systemroot%\system32\spoolsv.exe,-1 (spooler) - unknown owner - c:\windows\system32\spoolsv.exe (file missing)
o23 - service: @%systemroot%\system32\sppsvc.exe,-101 (sppsvc) - unknown owner - c:\windows\system32\sppsvc.exe (file missing)
o23 - service: @%systemroot%\system32\ui0detect.exe,-101 (ui0detect) - unknown owner - c:\windows\system32\ui0detect.exe (file missing)
o23 - service: updater service - acer - c:\program files\acer\acer updater\updaterservice.exe
o23 - service: @%systemroot%\system32\vaultsvc.dll,-1003 (vaultsvc) - unknown owner - c:\windows\system32\lsass.exe (file missing)
o23 - service: @%systemroot%\system32\vds.exe,-100 (vds) - unknown owner - c:\windows\system32\vds.exe (file missing)
o23 - service: @%systemroot%\system32\vssvc.exe,-102 (vss) - unknown owner - c:\windows\system32\vssvc.exe (file missing)
o23 - service: @%systemroot%\system32\wat\watux.exe,-601 (watadminsvc) - unknown owner - c:\windows\system32\wat\watadminsvc.exe (file missing)
o23 - service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - unknown owner - c:\windows\system32\wbengine.exe (file missing)
o23 - service: @%systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiapsrv) - unknown owner - c:\windows\system32\wbem\wmiapsrv.exe (file missing)
o23 - service: @%programfiles%\windows media player\wmpnetwk.exe,-101 (wmpnetworksvc) - unknown owner - c:\program files (x86)\windows media player\wmpnetwk.exe (file missing)
--
end of file - 11394 bytes
[/hjt]
hierbij een logje van iemand anders die heeft vage problemen maar kan het mij niet uitleggen ik heb al mbam gedraait maar niks te vinden dus hierbij een hjt.
[hjt]
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:35:33, on 25-1-2011
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16700)
Boot mode: Normal
Running processes:
c:\program files (x86)\egistec\mywinlocker 3\x86\mwldaemon.exe
c:\windows\system32\oem\setevent.exe
c:\program files (x86)\norton utilities 14\rmtray.exe
c:\program files (x86)\egistec egis software update\egisupdate.exe
c:\program files (x86)\scansoft\omnipagese4.0\opwarese4.exe
c:\program files (x86)\acer\hotkey utility\hotkeyutility.exe
c:\program files (x86)\norton internet security\norton internet security\engine\18.5.0.125\ccsvchst.exe
c:\program files (x86)\windows live\messenger\msnmsgr.exe
c:\program files (x86)\windows live\contacts\wlcomm.exe
c:\program files (x86)\teamviewer\version6\teamviewer.exe
c:\program files (x86)\trend micro\hijackthis\hijackthis.exe
r1 - hkcu\software\microsoft\internet explorer\main,default_page_url = [noparse]http://nl.msn.com/[/noparse]
r0 - hkcu\software\microsoft\internet explorer\main,start page = [noparse]http://www.startpagina.nl/[/noparse]
r1 - hklm\software\microsoft\internet explorer\main,default_page_url = [noparse]http://go.microsoft.com/fwlink/?linkid=69157[/noparse]
r1 - hklm\software\microsoft\internet explorer\main,default_search_url = [noparse]http://go.microsoft.com/fwlink/?linkid=54896[/noparse]
r1 - hklm\software\microsoft\internet explorer\main,search page = [noparse]http://go.microsoft.com/fwlink/?linkid=54896[/noparse]
r0 - hklm\software\microsoft\internet explorer\main,start page = [noparse]http://homepage.acer.com/rdr.aspx?b=acaw&l=0413&m=aspire_x3300&r=17360410sn0797368qsi5nx931l933[/noparse]
r0 - hklm\software\microsoft\internet explorer\search,searchassistant =
r0 - hklm\software\microsoft\internet explorer\search,customizesearch =
r0 - hklm\software\microsoft\internet explorer\main,local page = c:\windows\syswow64\blank.htm
r0 - hkcu\software\microsoft\internet explorer\toolbar,linksfoldername =
r3 - urlsearchhook: (no name) - {3ad798d0-4642-4c55-bc14-cfe7dd19e0d1} - (no file)
r3 - urlsearchhook: (no name) - {b896b704-25f7-4468-9feb-4088e111b6aa} - (no file)
r3 - urlsearchhook: amigobar toolbar - {c54a4bc4-2966-40ac-9ca4-ad863d6148ee} - c:\program files (x86)\amigobar\tbamig.dll
f2 - reg:system.ini: userinit=userinit.exe
o2 - bho: mediabar - {0974ba1e-64ec-11de-b2a5-e43756d89593} - c:\progra~2\bearsh~1\mediabar\toolbar\bearsharemediabardx.dll
o2 - bho: conduit engine - {30f9b915-b755-4826-820b-08fba6bd249d} - c:\program files (x86)\conduitengine\conduitengine.dll
o2 - bho: symantec nco bho - {602adb0e-4aff-4217-8aa1-95dac4dfa408} - c:\program files (x86)\norton internet security\norton internet security\engine\18.5.0.125\coieplg.dll
o2 - bho: symantec intrusion prevention - {6d53ec84-6aae-4787-aeee-f4628f01010c} - c:\program files (x86)\norton internet security\norton internet security\engine\18.5.0.125\ips\ipsbho.dll
o2 - bho: aanmeldhulp voor windows live id - {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files (x86)\common files\microsoft shared\windows live\windowslivelogin.dll
o2 - bho: windows live messenger companion helper - {9fdde16b-836f-4806-ab1f-1455cbeff289} - c:\program files (x86)\windows live\companion\companioncore.dll
o2 - bho: amigobar - {c54a4bc4-2966-40ac-9ca4-ad863d6148ee} - c:\program files (x86)\amigobar\tbamig.dll
o2 - bho: java(tm) plug-in 2 ssv helper - {dbc80044-a445-435b-bc74-9c25c1c588a9} - (no file)
o3 - toolbar: mediabar - {0974ba1e-64ec-11de-b2a5-e43756d89593} - c:\progra~2\bearsh~1\mediabar\toolbar\bearsharemediabardx.dll
o3 - toolbar: amigobar toolbar - {c54a4bc4-2966-40ac-9ca4-ad863d6148ee} - c:\program files (x86)\amigobar\tbamig.dll
o3 - toolbar: conduit engine - {30f9b915-b755-4826-820b-08fba6bd249d} - c:\program files (x86)\conduitengine\conduitengine.dll
o3 - toolbar: norton toolbar - {7febefe3-6b19-4349-98d2-ffb09d4b49ca} - c:\program files (x86)\norton internet security\norton internet security\engine\18.5.0.125\coieplg.dll
o4 - hklm\..\run: [egistecliveupdate] c:\program files (x86)\egistec egis software update\egisupdate.exe
o4 - hklm\..\run: [ssbkgdupdate] c:\program files (x86)\common files\scansoft shared\ssbkgdupdate\ssbkgdupdate.exe -embedding -boot
o4 - hklm\..\run: [opwarese4] c:\program files (x86)\scansoft\omnipagese4.0\opwarese4.exe
o4 - hklm\..\run: [hotkey utility] c:\program files (x86)\acer\hotkey utility\hotkeyutility.exe
o4 - hkcu\..\run: [nortonutilities] c:\program files (x86)\norton utilities 14\rmtray.exe /s
o4 - hkcu\..\run: [sidebar] c:\program files\windows sidebar\sidebar.exe /autorun
o4 - hkus\s-1-5-19\..\run: [sidebar] %programfiles%\windows sidebar\sidebar.exe /autorun (user 'local service')
o4 - hkus\s-1-5-19\..\runonce: [mctadmin] c:\windows\system32\mctadmin.exe (user 'local service')
o4 - hkus\s-1-5-20\..\run: [sidebar] %programfiles%\windows sidebar\sidebar.exe /autorun (user 'network service')
o4 - hkus\s-1-5-20\..\runonce: [mctadmin] c:\windows\system32\mctadmin.exe (user 'network service')
o8 - extra context menu item: google sidewiki... - res://c:\program files (x86)\google\google toolbar\component\googletoolbardynamic_mui_en_e11712c84ea7e12b.dll/cmsidewiki.html
o9 - extra button: @c:\program files (x86)\windows live\companion\companionlang.dll,-600 - {0000036b-c524-4050-81a0-243669a86b9f} - c:\program files (x86)\windows live\companion\companioncore.dll
o9 - extra button: @c:\program files (x86)\windows live\writer\windowslivewritershortcuts.dll,-1004 - {219c3416-8cb2-491a-a3c7-d9fcddc9d600} - c:\program files (x86)\windows live\writer\writerbrowserextension.dll
o9 - extra 'tools' menuitem: @c:\program files (x86)\windows live\writer\windowslivewritershortcuts.dll,-1003 - {219c3416-8cb2-491a-a3c7-d9fcddc9d600} - c:\program files (x86)\windows live\writer\writerbrowserextension.dll
o10 - unknown file in winsock lsp: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
o10 - unknown file in winsock lsp: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
o10 - unknown file in winsock lsp: c:\windows\system32\nvlsp.dll
o10 - unknown file in winsock lsp: c:\windows\system32\nvlsp.dll
o10 - unknown file in winsock lsp: c:\windows\system32\nvlsp.dll
o10 - unknown file in winsock lsp: c:\windows\system32\nvlsp.dll
o10 - unknown file in winsock lsp: c:\windows\system32\nvlsp.dll
o10 - unknown file in winsock lsp: c:\windows\system32\nvlsp.dll
o10 - unknown file in winsock lsp: c:\windows\system32\nvlsp.dll
o10 - unknown file in winsock lsp: c:\windows\system32\nvlsp.dll
o16 - dpf: {c3f79a2b-b9b4-4a66-b012-3ee46475b072} (messengerstatsclient class) - [noparse]http://messenger.zone.msn.com/binary/messengerstatspaclient.cab56907.cab[/noparse]
o16 - dpf: {e2883e8f-472f-4fb0-9522-ac9bf37916a7} - [noparse]http://platformdl.adobe.com/nos/getplusplus/1.6/gp.cab[/noparse]
o16 - dpf: {edfcb7cb-942c-4822-af14-f0b687409848} (image uploader control) - [noparse]http://cache.hyves-static.net/statics/aurigma/imageuploader4.cab[/noparse]
o18 - protocol: symres - {aa1061fe-6c41-421f-9344-69640c9732ab} - (no file)
o18 - protocol: wlpg - {e43ef6cd-a37a-4a9b-9e6f-83f89b8e6324} - c:\program files (x86)\windows live\photo gallery\albumdownloadprotocolhandler.dll
o23 - service: @%systemroot%\system32\alg.exe,-112 (alg) - unknown owner - c:\windows\system32\alg.exe (file missing)
o23 - service: @%systemroot%\system32\cisvc.exe,-1 (cisvc) - unknown owner - c:\windows\system32\cisvc.exe (file missing)
o23 - service: @%systemroot%\system32\efssvc.dll,-100 (efs) - unknown owner - c:\windows\system32\lsass.exe (file missing)
o23 - service: @%systemroot%\system32\fxsresm.dll,-118 (fax) - unknown owner - c:\windows\system32\fxssvc.exe (file missing)
o23 - service: forceware intelligent application manager (iam) - unknown owner - c:\program files\nvidia corporation\networkaccessmanager\bin32\nsvcappflt.exe
o23 - service: gregservice (greg_service) - acer incorporated - c:\program files (x86)\acer\registration\greghsrw.exe
o23 - service: google updateservice (gupdate) (gupdate) - google inc. - c:\program files (x86)\google\update\googleupdate.exe
o23 - service: @%windir%\system32\inetsrv\iisres.dll,-30007 (iisadmin) - unknown owner - c:\windows\system32\inetsrv\inetinfo.exe (file missing)
o23 - service: @keyiso.dll,-100 (keyiso) - unknown owner - c:\windows\system32\lsass.exe (file missing)
o23 - service: @comres.dll,-2797 (msdtc) - unknown owner - c:\windows\system32\msdtc.exe (file missing)
o23 - service: @mqutil.dll,-6102 (msmq) - unknown owner - c:\windows\system32\mqsvc.exe (file missing)
o23 - service: mywinlocker service (mwlservice) - egis technology inc. - c:\program files (x86)\egistec\mywinlocker 3\x86\\mwlservice.exe
o23 - service: norton 360 (n360) - unknown owner - c:\program files (x86)\norton 360\engine\3.8.0.41\ccsvchst.exe (file missing)
o23 - service: @%systemroot%\system32\netlogon.dll,-102 (netlogon) - unknown owner - c:\windows\system32\lsass.exe (file missing)
o23 - service: norton internet security (nis) - symantec corporation - c:\program files (x86)\norton internet security\norton internet security\engine\18.5.0.125\ccsvchst.exe
o23 - service: forceware ip service (nsvcip) - unknown owner - c:\program files\nvidia corporation\networkaccessmanager\bin32\nsvcip.exe
o23 - service: nvidia display driver service (nvsvc) - unknown owner - c:\windows\system32\nvvsvc.exe (file missing)
o23 - service: @%systemroot%\system32\psbase.dll,-300 (protectedstorage) - unknown owner - c:\windows\system32\lsass.exe (file missing)
o23 - service: @%systemroot%\system32\locator.exe,-2 (rpclocator) - unknown owner - c:\windows\system32\locator.exe (file missing)
o23 - service: @%systemroot%\system32\samsrv.dll,-1 (samss) - unknown owner - c:\windows\system32\lsass.exe (file missing)
o23 - service: @%systemroot%\system32\snmptrap.exe,-3 (snmptrap) - unknown owner - c:\windows\system32\snmptrap.exe (file missing)
o23 - service: @%systemroot%\system32\spoolsv.exe,-1 (spooler) - unknown owner - c:\windows\system32\spoolsv.exe (file missing)
o23 - service: @%systemroot%\system32\sppsvc.exe,-101 (sppsvc) - unknown owner - c:\windows\system32\sppsvc.exe (file missing)
o23 - service: @%systemroot%\system32\ui0detect.exe,-101 (ui0detect) - unknown owner - c:\windows\system32\ui0detect.exe (file missing)
o23 - service: updater service - acer - c:\program files\acer\acer updater\updaterservice.exe
o23 - service: @%systemroot%\system32\vaultsvc.dll,-1003 (vaultsvc) - unknown owner - c:\windows\system32\lsass.exe (file missing)
o23 - service: @%systemroot%\system32\vds.exe,-100 (vds) - unknown owner - c:\windows\system32\vds.exe (file missing)
o23 - service: @%systemroot%\system32\vssvc.exe,-102 (vss) - unknown owner - c:\windows\system32\vssvc.exe (file missing)
o23 - service: @%systemroot%\system32\wat\watux.exe,-601 (watadminsvc) - unknown owner - c:\windows\system32\wat\watadminsvc.exe (file missing)
o23 - service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - unknown owner - c:\windows\system32\wbengine.exe (file missing)
o23 - service: @%systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiapsrv) - unknown owner - c:\windows\system32\wbem\wmiapsrv.exe (file missing)
o23 - service: @%programfiles%\windows media player\wmpnetwk.exe,-101 (wmpnetworksvc) - unknown owner - c:\program files (x86)\windows media player\wmpnetwk.exe (file missing)
--
end of file - 11394 bytes
[/hjt]